1. Who is responsible for the data?
For this website, theSerkan acts as the data user responsible for deciding why and how personal data is collected and used. The studio is founder-led and operated from Hong Kong. Privacy questions, access requests and correction requests can be sent to hello@theserkan.com.
2. What we collect
When you complete a Fit Check, submit a project inquiry, review a proposal or use a private onboarding workspace, we may collect:
- your name, email address, telephone number, company and website or social profile;
- the system, package, budget range, timeline and commercial route you select;
- Fit Check scores, bottlenecks, the business challenge, desired result and supporting context you provide;
- proposal questions, acceptance details, payment status and related project records;
- company, billing, audience, decision-maker, brand, website, access-readiness and project information submitted during onboarding;
- files and links you deliberately provide for project preparation and delivery;
- the page, referral source and campaign parameters connected to the inquiry;
- a one-way hash of the submitting IP address and limited browser information for rate limiting, proposal acceptance records and security.
If analytics is configured and you choose to allow it, limited usage information may also be collected to understand which pages and offers are useful.
3. Why we use the information
Personal data is used only for purposes connected to the inquiry, proposal, project and operation of the website, including:
- reviewing the business context and deciding whether the project is a fit;
- responding to questions, preparing a diagnostic, proposal or project scope;
- recording the source, score, status and history of an inquiry so it is not lost or duplicated;
- recording proposal acceptance, payment readiness and onboarding completion;
- preparing, scheduling, delivering and supporting an agreed project;
- protecting forms, private links and workspaces against abuse or unauthorised access;
- improving the website, systems and customer experience when analytics consent has been given;
- meeting contractual, accounting, dispute-resolution or legal obligations when a project begins.
4. Marketing
Submitting a Fit Check, inquiry, proposal response or onboarding form does not automatically subscribe you to marketing. Personal data will not be used for unrelated direct marketing unless a separate, informed choice is provided. You may withdraw any marketing consent at any time.
5. Storage and retention
Inquiry, proposal, onboarding and uploaded-file records are stored in a protected location outside the public website directory. Access is limited to people who need the information to review or manage the inquiry or project. Records are kept only for as long as reasonably necessary for the inquiry, the resulting project, security, accounting or legal purposes, then deleted or de-identified where appropriate.
6. Who may process the data
Data may be processed by service providers that support hosting, email delivery, analytics, scheduling, payment, file transfer or project operations. They are expected to handle the information only for the agreed service and with appropriate safeguards. Personal data is not sold.
7. International access and transfers
theSerkan works across Hong Kong and international markets. Some service providers or project work may involve access from another location. Where this occurs, reasonable contractual, technical and organisational steps are used to protect the information.
8. Security
Practical safeguards include server-side validation, rate limiting, hidden anti-spam fields, restricted file permissions, non-public lead storage, private randomised proposal and onboarding links, authenticated founder access and HTTPS when the production domain is active. Raw passwords, card details, private keys and identity documents should not be submitted through the website or onboarding workspace.
9. Your choices and requests
You may ask whether personal data is held about you and request access, correction or deletion where applicable. You may also object to an unrelated use or withdraw a consent previously given. Requests should be sent to hello@theserkan.com with enough information to identify the relevant record.
10. Cookies and browser storage
Essential browser storage may be used for security, contact-form draft recovery and to remember privacy choices. Optional analytics is loaded only after consent when a measurement service has been configured. More detail is available in the Cookie Policy.
11. Changes to this notice
This notice may be updated when the website, private workspaces, service providers or operating practices change. The current version and update date will remain available on this page.
This notice describes the website’s operating practices. It is not a substitute for legal advice about a specific project, jurisdiction or data-processing activity.